Staff Application Security Engineer

bamboohr17; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Disability insurance

Vacation & holidays

Parental leave

Volunteer leave

Retirement plan with match

Employee assistance program

Job summary

bamboohr17 is seeking a staff-level application security professional to lead security practices for AI features and agent-based systems, while remaining hands-on in design and delivery. You will set review standards, build tools, and influence engineering processes across teams, including how AI-related security requirements are evaluated and enforced.

You will lead security reviews, define safeguards for agent identity and data permissions, and collaborate with privacy and legal teams to turn

Qualifications

• Bachelor’s degree or equivalent practical experience in CS/InfoSec.
• 8+ years in security, incl. 5+ years hands-on app sec work.
• Experience securing multi-tenant SaaS and cloud infrastructure.
• Hands-on experience building AI agents or agentic workflows with permissions and validation.
• Ability to lead security work across teams and coach engineers on threat modeling.

Responsibilities

• Lead security reviews and threat modeling for AI features, autonomous agents, protocol servers, and third-party integrations; keep review guidance current.
• Define safeguards for agent identity and delegated access, scoped data permissions, untrusted tool outputs, supply-chain risks, and human approval of consequential actions.
• Design and ship security-team agents for tasks such as validation, triage, review support, and remediation, with bounded permissions and clear evaluation criteria.
• Work with engineering and product leaders to add security requirements and review gates to development and release workflows.
• Coordinate multi-team security programs, track goals and dependencies, and report progress, risks, and tradeoffs to leadership.
• Partner with privacy, legal, and governance teams to turn AI policy into technical controls; coach developers and security peers and support escalated incidents as needed.

Skills

Application security leadership

Threat modeling

AI security experience

Cross-team coaching

Security reviews

Education

Bachelor’s degree in CS or InfoSec

Tools

Cloud security platforms

SaaS security tooling

Job description

Role overview

This staff-level application security role leads security practices for AI features and agent-based systems while remaining hands-on in design and delivery. You will set review standards, build tools that help the security team scale its work, and influence engineering processes across teams, including how AI-related security requirements are evaluated and enforced.

Responsibilities

• Lead security reviews and threat modeling for AI features, autonomous agents, protocol servers, and third-party integrations; keep review guidance current.
• Define safeguards for agent identity and delegated access, scoped data permissions, untrusted tool outputs, supply-chain risks, and human approval of consequential actions.
• Design and ship security-team agents for tasks such as finding validation, triage, review support, and remediation, with bounded permissions and clear evaluation criteria.
• Work with engineering and product leaders to add security requirements and review gates to development and release workflows.
• Coordinate multi-team security programs, track goals and dependencies, and report progress, risks, and tradeoffs to leadership.
• Partner with privacy, legal, and governance teams to turn AI policy into technical controls; coach developers and security peers and support escalated incidents as needed.

Requirements

• Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.
• At least 8 years in security, including 5 or more years of hands-on application security work.
• Experience securing multi-tenant SaaS systems, including tenant isolation, and familiarity with cloud and infrastructure security.
• Hands-on experience building AI agents or agentic workflows, with practical examples of managing permissions, failures, and validation.
• Ability to lead security work across teams, communicate tradeoffs, and coach engineers on secure design and threat modeling.

Benefits and work setup

The listing describes the position as remote within a specified state.

• health, life, and disability insurance
• vacation, company holidays, parental and volunteer leave
• a retirement plan with up to a 6% match
• an employee assistance program.